Join the waitlist

Privacy Policy

How HeyLuka handles information about parents, children and their families.

Last updated: October 22, 2026

HeyLuka is operated by HeyLuka Pty Ltd, ACN 703 384 892, Australia. This policy covers our website, waitlist, parent accounts and personalised podcast service. Contact hello@heyluka.app with privacy questions or requests.

For the waitlist, we collect your email address, country, consent record and submission time. Joining the waitlist does not create an account.

For an account, we collect your email, selected country, authentication and session records. When you set up a family, we collect the names, ages or birthdays, interests, relationships, preferences and other details you enter. Photos, information about relatives and pets, and extra personal details are optional. We also keep the scripts, artwork, recordings, schedules and settings created for your family.

We receive billing and transaction records from our payment provider and retain correspondence when you contact us. The payment provider collects card details directly; HeyLuka does not store your full card number. Our systems also process technical information needed for security and reliability, such as device and request information and error reports.

HeyLuka accounts are for adults. Children listen through access managed by a parent or authorised adult; they do not create their own accounts. Only provide information about a child you are authorised to manage, and obtain permission before adding other people’s details or photos. You can start with a name and age and add optional details later. Please avoid sensitive information that is not needed for their podcast.

We use information to verify your email, provide and personalise podcasts, manage family access and listening devices, process purchases, respond to support requests, and maintain security and reliability. Details you choose to include may appear in stories, artwork and audio. Waitlist details are used to manage your interest in early access and contact you about that access. You can ask us to remove you from the waitlist. Without an email and supported country we cannot create an account; without optional family details we can still provide a less personalised experience.

Authorised family members can access information according to their role and the access you grant. Private listening links, feeds and gift links can also give access to whoever has them, so share them carefully.

We use service providers for hosting and databases (including Cloudflare and Supabase), email delivery (Resend), payments (Airwallex), AI generation (OpenRouter and the model providers used for your request), and app error monitoring (Sentry, where enabled). They receive information needed for their role. We may also disclose information where required by law or necessary to address fraud, security incidents or legal claims.

Creating a personalised episode involves sending relevant family details and prompts to AI providers. Speech generation receives the script to turn into audio. Photo-to-character and artwork tools may send the reference images you choose to image providers. Providers and models can differ by feature. These services have their own processing and retention arrangements; storage of your account in Australia does not mean all AI processing happens there. Avoid entering information you do not want used in generation.

Australian account, family and waitlist database records are stored in Sydney, Australia. This is why we ask for country at sign-up. We do not ask you to reselect it at every sign-in.

Website delivery, media storage, email, payments, monitoring and AI services may process information outside Australia. Locations depend on the service and model used; Sydney database storage is not an Australia-only processing guarantee. Contact hello@heyluka.app for information about the providers and processing locations relevant to a particular feature.

We use cookies and device storage to keep you signed in, remember preferences and support listening features. App diagnostics help us identify technical failures; error reporting is configured to filter personal content and authentication details. We do not use advertising cookies in the current service. You can clear or block browser storage, although signing in and some preferences may then stop working.

Waitlist entries are removed after 180 days, or earlier on request. Account and podcast records are kept while needed to provide the service and handle support, security and legal obligations. Some billing, audit and backup records may need to remain after account closure. Cancelling a subscription does not itself delete your account or family records. Contact us to request deletion and discuss what can be removed.

We use access controls and other safeguards to protect information, but no online service can guarantee absolute security. Keep sign-in links and private listening links secure and tell us promptly if you suspect unauthorised access.

You can update supported details in your account or email hello@heyluka.app to request access, correction or deletion, withdraw waitlist interest, or raise a privacy concern. We may need to verify your identity and authority to act for a child or family member. If we cannot fulfil a request, we will explain why and any available next steps.

Please contact us first so we can investigate a complaint. If you remain dissatisfied, you can contact the Office of the Australian Information Commissioner (OAIC) through oaic.gov.au. This policy does not limit any privacy rights you have under applicable law.

We will update this page when our information handling changes and show the new date. We will provide further notice or seek consent where required for a material change.

Questions? Contact hello@heyluka.app.